Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          n1mNvVAD90vxf5aS7cc48Lq02oTwh4kBR2qcnkkkkJU=
Subject key identifier:   07:CA:AE:17:EB:84:3B:D4:68:E2:32:27:F7:5C:FE:37:68:17:30:A7
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       53CFF099FC4B0D8598E51848312720B1896F3A88
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:44 +0000
ROA not before:           Thu 04 Apr 2024 16:40:44 +0000
ROA not after:            Thu 03 Apr 2025 16:45:44 +0000
asID:                     266437
IP address blocks:        2804:37d0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cf:f0:99:fc:4b:0d:85:98:e5:18:48:31:27:20:b1:89:6f:3a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:44 2024 GMT
            Not After : Apr  3 16:45:44 2025 GMT
        Subject: CN=07CAAE17EB843BD468E23227F75CFE37681730A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:d3:e5:f7:0c:8e:0f:17:c9:9c:ec:71:fa:
                    39:5c:92:b7:2b:5c:e3:96:bf:09:55:b4:b1:7e:cf:
                    d5:10:b0:49:f9:2e:88:14:b7:d8:2d:0b:69:a9:96:
                    a8:3b:2f:b2:25:02:55:c1:64:3f:3d:84:1b:70:89:
                    10:29:ca:96:d0:78:15:e5:09:d1:69:0e:86:6f:69:
                    3b:a7:d3:6d:2e:52:ac:b4:7f:bd:2b:de:84:03:e0:
                    9a:10:81:d5:84:59:16:49:b4:49:16:3c:b6:12:64:
                    cf:eb:06:df:41:48:77:b2:7e:e1:c1:57:8f:7d:11:
                    ad:44:16:d9:8a:2a:af:c9:d9:bf:3b:00:88:0f:04:
                    0e:89:83:01:b2:0a:9a:8f:b9:1f:6a:5a:18:ca:6d:
                    ba:12:b2:4a:2a:d7:9a:11:93:08:55:0f:51:ab:04:
                    90:54:98:03:a2:ee:6b:5b:5b:05:be:ea:6a:a1:43:
                    70:3e:f2:26:cf:c6:88:15:26:6d:cc:21:6f:e9:b3:
                    4d:7e:b9:1b:c3:fe:9d:dc:58:8e:42:b7:67:7f:48:
                    8d:32:fe:63:ff:2b:7b:71:1d:a7:92:96:7f:51:08:
                    65:b2:a0:1d:df:f0:e9:1b:79:a2:0c:91:76:45:49:
                    43:43:35:66:10:5f:37:bb:41:4c:e1:d5:6b:5b:76:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CA:AE:17:EB:84:3B:D4:68:E2:32:27:F7:5C:FE:37:68:17:30:A7
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:13:02:a7:ba:d8:21:a7:84:ce:52:60:16:41:f4:93:33:81:
         32:71:88:cc:95:e9:66:84:a5:54:f7:a8:56:a2:65:f3:1e:00:
         3b:89:5d:9a:64:b8:90:aa:ba:f7:f6:93:b4:a7:20:11:37:c5:
         19:f9:43:4a:51:d6:fb:1c:5d:50:e7:ee:95:7a:d2:dc:ad:97:
         b6:b3:a3:20:3e:46:c2:9e:8d:d7:27:e2:3e:99:f3:eb:fc:00:
         db:86:ea:61:a9:42:13:88:9d:3c:ef:7d:68:f4:3f:92:b5:61:
         d1:bc:af:41:5e:f9:58:6d:de:d8:b4:35:21:18:08:f5:51:4f:
         48:1b:ec:66:1b:a4:51:1a:ad:ea:0a:9c:37:37:fb:a7:1e:fe:
         82:4b:09:06:55:77:67:24:59:e3:e8:84:03:c8:99:b0:dc:17:
         20:e8:75:d1:46:fe:3a:11:6c:e2:5d:07:de:21:30:89:c6:3a:
         8c:6a:eb:6a:d7:1a:b5:d0:f1:a1:46:69:d4:a5:e0:a1:89:b0:
         db:b4:b4:78:d8:c1:51:94:74:76:84:87:13:19:a4:21:31:f0:
         7e:ba:4d:03:b6:4b:5a:1a:a1:0f:a4:7b:4c:92:7b:67:53:13:
         75:5b:a3:8f:1f:43:96:5f:f4:6b:09:fe:84:e0:28:ae:4a:72:
         b7:a0:8d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org